US Patent 11514171 Code vulnerability detection and remediation

A method includes receiving code for computer programming, determining whether at least a portion of the code comprises at least one vulnerability, and comparing at least the portion of the code comprising the at least one vulnerability to a knowledge base. The knowledge base comprises (i) a plurality of code fragments comprising a plurality of vulnerabilities; and (ii) a plurality of solutions to prevent corresponding ones of the plurality of vulnerabilities. The method further includes identifying, based on the comparing, a code fragment of the plurality of code fragments matching at least the portion of the code comprising the at least one vulnerability, and executing a solution of the plurality of solutions corresponding to the identified code fragment to prevent the at least one vulnerability in at least the portion of the code.